Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP All
Known Affected Versions:
10.2.4
Opened: Oct 21, 2015 Severity: 3-Major
When a BIG-IP proxied connection is being terminated, and the client is not accepting packets (zero window) then the connection may be reset after a timeout.
Drained packets from server may be lost if the client is not accepting them.
In the following scenario: 1. TCP standard VIP receives all TCP payloads and FIN/ACK from server. 2. TCP standard VIP forwards TCP payloads(same size of client receive window) 3. Client sends zero window packet. 4. TCP profile used "fin wait 5", then after timeout, send RST to both client and server.
None.
None